This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer File: DMgShJHbEyzPzYKt5wDeswayFho.cer (raw, json) Hash identifier: HSkOEH/G+mogntSfnHPZYAHRUxf8EHwiLTdgCe9acN4= Subject key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38C9C537916969E55DCFEE7D6F2427 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210791 IP: 92.119.96.0/22 IP: 185.32.136.0/22 IP: 185.78.0.0/22 IP: 2a00:c420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c9:c5:37:91:69:69:e5:5d:cf:ee:7d:6f:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cc8128491db132ccfcd82ade700deb306b2161a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:b7:66:ff:96:43:1e:2b:62:d6:78:f4:e4: 31:16:c4:2b:ef:bc:22:51:5f:0a:e3:a2:d7:97:df: e3:17:9b:c5:dd:3e:e8:9c:8a:98:74:6d:fb:ee:d5: c1:74:b2:de:34:97:97:92:6e:48:f1:8d:ad:7a:a9: 9a:44:95:c6:26:f6:49:89:7a:6a:8e:85:33:08:09: 5c:01:25:0e:0f:23:da:15:22:dd:d2:aa:da:27:33: 49:be:4c:26:00:1e:24:08:53:7d:62:ec:e0:2f:d7: 9c:ce:bf:7b:3c:39:b3:10:44:eb:23:e6:5f:04:f6: f6:a7:fe:d1:b4:c4:52:95:e3:23:05:42:6e:39:dd: 73:7e:ec:db:21:4d:73:ef:ce:61:ec:81:b6:57:57: 2b:14:2b:02:0e:e9:78:2c:0f:78:c6:df:0a:85:6a: 32:54:32:21:b9:8f:26:f3:81:29:c0:de:44:b1:27: 9a:08:61:99:9e:9f:7a:b2:c3:22:5e:9b:bd:de:1d: ca:a5:8d:4b:57:78:d3:24:d6:2f:75:ba:c2:e5:4c: 0d:5f:1a:ea:3a:22:3c:2e:ae:99:2b:03:d7:62:d5: 73:ee:f8:94:f0:ea:83:f6:87:bb:ac:08:32:6b:43: 7e:04:92:9a:5a:39:18:6b:85:83:1b:c5:8d:20:68: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.96.0/22 185.32.136.0/22 185.78.0.0/22 IPv6: 2a00:c420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210791 Signature Algorithm: sha256WithRSAEncryption 9f:06:4c:10:60:02:da:d5:ab:b1:10:fa:43:13:92:d9:76:bc: 75:45:40:4d:af:13:6b:19:92:0f:ee:f7:4a:dc:a1:99:0f:b9: d3:56:c3:00:28:9e:a5:4a:08:67:38:b7:fc:c2:ec:d1:b4:9c: 34:e0:ef:f8:d7:5c:b8:fc:bb:24:f7:3b:4c:ec:de:c3:ba:19: b5:5a:57:0a:55:35:ab:12:10:73:02:5b:3b:ed:93:3a:87:9a: fb:5c:d6:27:a9:a5:db:55:94:4a:fe:9e:1d:4e:60:3d:ab:e9: cf:bd:af:64:3c:b9:af:a1:d9:97:35:42:11:53:14:8f:02:a0: 8c:2f:92:ba:2f:20:b8:e0:2d:45:d3:9a:ca:00:d3:4a:00:53: 09:cb:28:84:80:0b:92:86:95:2c:85:1b:42:da:cd:3f:98:db: 19:94:cf:20:41:20:ca:cb:ca:75:90:55:7f:a9:6b:53:2a:5e: 86:95:8d:3a:59:b1:40:16:ef:8e:89:64:e0:0a:f9:ed:86:0b: 99:93:62:50:da:7c:cd:69:ab:3a:6f:2c:71:e6:9a:85:8c:04: 96:12:ab:8d:be:c6:46:fc:cc:ac:3b:4b:d1:80:01:69:06:e8: fd:c9:46:16:83:b5:b8:d7:10:33:74:c4:66:a6:e0:5b:40:d7: 57:f5:1e:b8 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt+OMnFN5FpaeVdz+59byQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2M4MTI4NDkxZGIxMzJjY2ZjZDgyYWRlNzAwZGViMzA2YjIxNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgu3Zv+WQx4rYtZ49OQxFsQr77wi UV8K46LXl9/jF5vF3T7onIqYdG377tXBdLLeNJeXkm5I8Y2teqmaRJXGJvZJiXpq joUzCAlcASUODyPaFSLd0qraJzNJvkwmAB4kCFN9YuzgL9eczr97PDmzEETrI+Zf BPb2p/7RtMRSleMjBUJuOd1zfuzbIU1z785h7IG2V1crFCsCDul4LA94xt8KhWoy VDIhuY8m84EpwN5EsSeaCGGZnp96ssMiXpu93h3KpY1LV3jTJNYvdbrC5UwNXxrq OiI8Lq6ZKwPXYtVz7viU8OqD9oe7rAgya0N+BJKaWjkYa4WDG8WNIGiJ+wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFAzIEoSR2xMsz82CrecA3rMGshYaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzJjM2Y1 My0xYmFiLTRkMzItODM4MC1kNTkxMDhiNTcyMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMmMzZjUz LTFiYWItNGQzMi04MzgwLWQ1OTEwOGI1NzIxNC8xL0RNZ1NoSkhiRXl6UHpZS3Q1 d0Rlc3dheUZoby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCXHdgAwQCuSCIAwQCuU4AMA0EAgACMAcDBQAq AMQgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3ZzANBgkqhkiG9w0BAQsFAAOC AQEAnwZMEGAC2tWrsRD6QxOS2Xa8dUVATa8TaxmSD+73StyhmQ+501bDACiepUoI Zzi3/MLs0bScNODv+NdcuPy7JPc7TOzew7oZtVpXClU1qxIQcwJbO+2TOoea+1zW J6ml21WUSv6eHU5gPavpz72vZDy5r6HZlzVCEVMUjwKgjC+Sui8guOAtRdOaygDT SgBTCcsohIALkoaVLIUbQtrNP5jbGZTPIEEgysvKdZBVf6lrUypehpWNOlmxQBbv jolk4Ar57YYLmZNiUNp8zWmrOm8sceaahYwElhKrjb7GRvzMrDtL0YABaQbo/clG FoO1uNcQM3TEZqbgW0DXV/UeuA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:40 2026 by rpki-client